The records included patients' full names, dates of birth, medical record numbers and diagnosis information. Farrow says the records did not include financial information, Social Security numbers or home addresses.

The theft occurred about Nov. 1. Clinic officials sent letters to all affected patients Thursday.

Farrow says the delay in notification came about because the clinic was doing an internal investigation to understand the extent of the situation.

The clinic says it notified federal officials about the security breach as required.

The Free Press of Mankato reports that the laptop has not been recovered.